diff --git a/.github/workflows/main_matrix.yml b/.github/workflows/main_matrix.yml
index 0a72bdc3e..815b03c86 100644
--- a/.github/workflows/main_matrix.yml
+++ b/.github/workflows/main_matrix.yml
@@ -258,6 +258,7 @@ jobs:
       push: false
 
   gather-artifacts:
+    # trunk-ignore(checkov/CKV2_GHA_1)
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/merge_queue.yml b/.github/workflows/merge_queue.yml
index d3df35ac2..e2264e250 100644
--- a/.github/workflows/merge_queue.yml
+++ b/.github/workflows/merge_queue.yml
@@ -243,6 +243,7 @@ jobs:
       push: false
 
   gather-artifacts:
+    # trunk-ignore(checkov/CKV2_GHA_1)
     permissions:
       contents: write
       pull-requests: write